
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json)
Hash identifier: TQaC2tbS3bcQf89Llc+fhucblaGq+oY7ktTXzS7bZbk=
Subject key identifier: 54:D0:AC:5C:A2:E7:C5:3E:FD:45:43:86:5F:FC:95:3D:68:F4:8D:44
Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Certificate serial: 02AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
Manifest number: 02A4
Signing time: Sat 03 Oct 2026 02:10:55 +0000
Manifest this update: Sat 03 Oct 2026 02:10:55 +0000
Manifest next update: Sat 10 Oct 2026 02:10:55 +0000
Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: LwHFdcXsgeYRvVi5d4UTkd0toEQNWeVM1IaxeV/Hrx0=)
2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 684 (0x2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Validity
Not Before: Oct 3 02:10:55 2026 GMT
Not After : Oct 10 02:10:55 2026 GMT
Subject: CN=6ac0642f-1d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:56:94:72:35:97:53:00:00:ce:7a:75:f4:
47:75:da:fb:d5:c6:c2:3a:76:b4:20:26:44:75:1d:
be:27:5c:f5:fa:8e:a4:cf:e6:05:70:bd:00:57:d6:
4b:13:75:96:13:95:14:5f:e6:51:27:a3:d3:e0:2f:
b5:1a:e8:5b:c0:81:2f:ad:e3:7b:71:91:f3:45:bb:
26:3e:19:ae:36:50:09:7a:83:62:08:f8:56:be:b1:
9a:9e:74:65:09:79:07:dc:46:c3:c1:59:47:87:6b:
5a:68:20:2b:4e:5c:fb:6e:18:56:32:40:9c:33:e0:
d7:f3:f3:ad:25:fc:fe:4b:95:2c:90:6d:93:95:4e:
f8:08:76:9d:b6:7a:82:e9:08:0b:f4:56:cc:93:59:
19:ae:a1:0b:2a:25:1e:e7:62:01:12:8b:19:0f:cc:
d5:a2:bf:da:13:44:6f:19:ee:41:3a:83:91:fb:2f:
d9:0e:62:7c:be:fb:e8:73:8a:36:29:16:15:f8:97:
be:4d:5d:3c:9d:27:5f:e6:75:5a:8c:9d:ff:17:d9:
59:a0:d4:b3:6a:08:4f:4d:6c:90:21:5b:09:c0:32:
95:6d:a7:93:32:f5:60:e2:e1:3d:0c:61:36:47:c1:
1c:b8:fb:77:7d:5e:c3:ba:77:f5:0d:d5:7a:f7:74:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:AC:5C:A2:E7:C5:3E:FD:45:43:86:5F:FC:95:3D:68:F4:8D:44
X509v3 Authority Key Identifier:
keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:9f:72:e8:a7:94:80:3d:dd:a0:09:5f:d1:04:7e:21:a5:ce:
73:36:49:4f:87:c5:71:bb:34:19:d6:f6:bc:2f:57:3b:28:ba:
f0:91:a4:fd:8b:c5:d5:c4:be:8e:a1:a5:e8:58:e6:db:39:3d:
4a:30:d3:ac:e3:d2:2a:2e:99:10:98:62:34:6f:2f:20:d4:14:
d1:6d:9d:be:e5:20:26:af:0d:6e:21:b8:0e:19:47:62:73:c4:
0b:94:03:b8:d5:d9:bf:7d:c2:30:50:2e:2e:06:d3:b4:aa:fb:
a0:c8:33:2b:c6:f6:df:cc:2f:32:48:05:09:8d:6d:5f:85:65:
f5:8d:10:e2:da:89:c8:e5:56:24:cc:0f:d5:c2:2e:34:6c:55:
97:ca:bf:5a:8e:59:30:fa:8f:da:20:7c:3c:2a:14:01:4d:37:
72:85:06:4a:23:d6:cd:3d:dd:a0:da:7d:85:0a:dd:eb:33:bc:
af:0c:94:57:a0:38:a3:b0:2b:2f:3a:b6:14:7b:50:67:fe:40:
c8:89:9c:28:c2:5e:08:37:6e:20:0f:cf:8c:cd:99:72:68:42:
bb:11:47:a9:23:67:a7:1b:39:e5:2e:38:54:48:b7:7f:c7:ee:
85:b9:9c:e8:9e:15:28:66:88:d3:1f:0e:8b:5c:0a:ae:0a:57:
c1:b3:76:b1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRBMTMxMTAvBgNVBAUTKEE1RkIzMUQ0RDUxMjVGN0M5QUFFNTAwMzM1QTQ4MEZD
Nzc5MDhGMTUwHhcNMjYxMDAzMDIxMDU1WhcNMjYxMDEwMDIxMDU1WjAYMRYwFAYD
VQQDEw02YWMwNjQyZi0xZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvPxWlHI1l1MAAM56dfRHddr71cbCOna0ICZEdR2+J1z1+o6kz+YFcL0AV9ZL
E3WWE5UUX+ZRJ6PT4C+1GuhbwIEvreN7cZHzRbsmPhmuNlAJeoNiCPhWvrGannRl
CXkH3EbDwVlHh2taaCArTlz7bhhWMkCcM+DX8/OtJfz+S5UskG2TlU74CHadtnqC
6QgL9FbMk1kZrqELKiUe52IBEosZD8zVor/aE0RvGe5BOoOR+y/ZDmJ8vvvoc4o2
KRYV+Je+TV08nSdf5nVajJ3/F9lZoNSzaghPTWyQIVsJwDKVbaeTMvVg4uE9DGE2
R8EcuPt3fV7Dunf1DdV693SCrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFTQrFyi
58U+/UVDhl/8lT1o9I1EMB8GA1UdIwQYMBaAFKX7MdTVEl98mq5QAzWkgPx3kI8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEExMy9CQjZDOUI1NEI5
ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gzeWFybEFETmFTQV9IZVFq
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Bmc3gxTlVTWDN5YXJsQUROYVNBX0hlUWp4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEExMy9CQjZDOUI1NEI5ODAxMUVEQTM3QjFCNjVDNEY5QUUwMi9wZnN4MU5VU1gz
eWFybEFETmFTQV9IZVFqeFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANZ9y6KeUgD3doAlf0QR+IaXOczZJT4fFcbs0Gdb2vC9XOyi68JGk/YvF1cS+
jqGl6Fjm2zk9SjDTrOPSKi6ZEJhiNG8vINQU0W2dvuUgJq8NbiG4DhlHYnPEC5QD
uNXZv33CMFAuLgbTtKr7oMgzK8b238wvMkgFCY1tX4Vl9Y0Q4tqJyOVWJMwP1cIu
NGxVl8q/Wo5ZMPqP2iB8PCoUAU03coUGSiPWzT3doNp9hQrd6zO8rwyUV6A4o7Ar
Lzq2FHtQZ/5AyImcKMJeCDduIA/PjM2ZcmhCuxFHqSNnpxs55S44VEi3f8fuhbmc
6J4VKGaI0x8Oi1wKrgpXwbN2sQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 16:18:00 2026 by rpki-client